IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Universal connector tls certificate

  • 1.  Universal connector tls certificate

    Posted an hour ago

    Hello,

    we are integrating Scylla with guardium uc via syslog over tls connectivity. Now I have guardium uc script

    tcp { port => 6514 type => "sylladb"dns_reverse_lookup_enabled => false ssl_enable => true ssl_cert => "${SSL_DIR}/app.crt" ssl_key => "${SSL_DIR}/app.key"ssl_verify => false

    and in Scylla rsys confi we have gnutls stream setup .
    now we have internal CA signed certificate which we want to use and want cert.pem to point at it but for some reason when I do OpenSSL from Scylla node the certificate presented by guardium is self signed so it gives self signed expired cert error. We have installed intermediate cert and root cert at Scylla node and whole bundle is in key store guardium but not sure how configuration can point at it so certificate presented by guardium is internal ca signed cert. Thanks



    ------------------------------
    sara rehan
    ------------------------------